summaryrefslogtreecommitdiff
path: root/security/ddos-scan
AgeCommit message (Collapse)AuthorFilesLines
2001-11-01Move pkg/ files into package's toplevel directoryzuntum3-3/+3
2001-04-19Move to sha1 digests, add distfile sizes.agc1-2/+3
2001-04-17+ move the distfile digest/checksum value from files/md5 to distinfoagc3-6/+4
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz2-2/+2
2001-02-06Remove unnecessary MESSAGE. (Part's self-evident, and the rest is onlywiz1-19/+0
the not-very-special license.)
2000-09-03remove trailing empty linewiz1-1/+0
2000-04-06Update to newer distfile. Only change is in the README:wiz2-5/+5
Author recommends RID instead of his own program. Fixes pkg/9805.
2000-02-14Make this work on NetBSD as well as Solaris.agc3-9/+25
2000-02-11Initial import of ddos-scan into the NetBSD packages collection.agc6-0/+76
"dds" is a program to scan for a limited set of distributed denial of service (ddos) agents. At present, it scans for active instances of "trinoo", "Tribe Flood Network" ("TFN") and "stacheldraht" agents, which were compiled using the default values in known source distributions, such as those found at: http://packetstorm.securify.com/distributed/ It will *not* detect TFN2K agents. For analyses of the three distributed denial of service attack tools it scans for, and the methods being used by dds to identify them, see: http://staff.washington.edu/dittrich/misc/trinoo.analysis http://staff.washington.edu/dittrich/misc/tfn.analysis http://staff.washington.edu/dittrich/misc/stacheldraht.analysis